$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft File: da2a5577-6855-4d86-a3f1-a04b562e9c06.mft (raw, json) Hash identifier: DsNf7/bjlZte7rKOih32/Zestfe3gq4ureve5BFW1gI= Subject key identifier: D1:5E:5A:87:B5:BB:DD:52:B8:31:71:A4:6C:F0:0F:0F:D0:60:5F:25 Authority key identifier: 48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA Certificate issuer: /CN=da2a5577-6855-4d86-a3f1-a04b562e9c06 Certificate serial: 010D0C9F4328584DA2F6F766687C855C7FB36618 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft Manifest number: 010D0C9F4328584073A81DC03B24E0F90C54F4D6 Signing time: Sun 26 Apr 2026 17:00:04 +0000 Manifest this update: Sun 26 Apr 2026 17:00:04 +0000 Manifest next update: Tue 28 Apr 2026 17:00:00 +0000 Files and hashes: 1: 046194d7-7434-3947-8320-13d99bbe463f.roa (hash: at8v8I7E0mCfAGvAZeMyqqAnFQ429G44XqSZBrjIxn0=) 2: 6ebb5ee7-b789-3a15-b000-124bab99c3ab.roa (hash: kkinooKoN8sAyzRS3rbP5Q2XaVHO4LRfit8U3jRFfm4=) 3: a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa (hash: AhgPxB++APRHukGBVdbDqSa/cNUarBfdjq5PBMLRGA4=) 4: da2a5577-6855-4d86-a3f1-a04b562e9c06.crl (hash: GOhxS09fO/CxaxBsKzQnhgaULla22vgztukzxY+4uqo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:f6:f7:66:68:7c:85:5c:7f:b3:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da2a5577-6855-4d86-a3f1-a04b562e9c06 Validity Not Before: Apr 26 17:00:04 2026 GMT Not After : Apr 28 17:00:00 2026 GMT Subject: CN=0e8877eb-af64-40f9-a1c4-efbd5bb53612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:d6:dd:44:77:59:09:84:58:1e:c6:64:47: ca:0d:d9:e9:44:3c:af:f4:75:66:67:ec:34:15:04: af:a4:aa:2d:ad:9d:74:78:25:1b:a6:e5:4b:32:2f: 01:2f:09:44:c9:88:49:97:aa:c4:b3:78:59:02:30: f5:88:a4:6e:5f:67:c8:6b:fe:ac:38:79:e1:fa:1e: c9:45:68:48:0c:d0:e0:c4:f8:fa:1a:b6:51:09:27: 1d:76:5c:28:55:e0:89:70:ec:5f:c9:c7:43:b6:98: b8:36:4b:ea:6e:6e:58:ab:16:2e:ec:d4:38:2b:67: 2a:59:c6:96:c1:f2:62:9d:02:9f:eb:dc:e5:1f:65: fb:94:cd:48:ce:0f:3b:ff:e3:3a:89:cb:28:1b:c2: d9:41:02:ee:a9:9b:aa:4b:ce:00:f7:f7:9a:88:fa: 2c:df:82:d3:cd:3e:a6:11:c1:ea:42:6d:40:98:ba: f7:14:d0:22:7c:26:20:b5:19:4b:f6:ab:cb:c9:cd: bf:46:a6:cc:4a:b0:cc:04:e7:0a:73:a6:1a:ff:6e: 62:aa:76:b0:7d:0d:2d:0f:c6:65:35:67:6e:a1:aa: 72:29:ee:02:71:93:c7:d2:52:d8:9e:2d:48:5b:8c: 91:a1:5d:16:82:4e:8e:e2:28:e2:6a:60:91:90:9b: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:5A:87:B5:BB:DD:52:B8:31:71:A4:6C:F0:0F:0F:D0:60:5F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl X509v3 Authority Key Identifier: keyid:48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d9:07:43:f1:f7:54:45:80:e9:fe:62:1d:87:c9:a9:b6:98: 5d:60:28:f5:88:6d:3d:98:01:d6:c1:91:1d:6d:e7:8e:27:f3: ae:e8:c9:d4:bf:12:58:b8:1e:d0:a6:9b:fb:7f:cd:90:f0:d1: fc:ae:00:11:e3:91:04:de:68:e8:80:b9:78:7a:d5:44:2a:fc: 56:9d:aa:92:1b:9a:78:4a:61:ff:1a:14:a7:22:e0:ea:a6:9d: ac:7b:3b:7f:c4:0c:2c:74:cd:0b:96:57:86:0b:3c:20:92:44: cc:01:8c:e1:05:c0:a8:c5:37:1f:18:4c:00:2a:3e:69:ff:0f: 1b:a6:3d:29:10:3e:03:dd:42:d5:08:6e:78:91:f4:64:24:e3: 6e:fc:79:5f:a1:a2:d5:0b:40:bd:7d:77:e0:32:1b:61:44:b4: 73:3f:d8:34:30:fd:48:d8:c0:43:40:71:2e:92:8f:71:1a:68: 07:c2:ff:87:c2:d2:bf:d7:71:16:13:5c:da:0e:cc:8f:b7:c5: 68:6b:54:fd:c7:11:07:81:31:38:f5:0d:14:90:3d:f4:db:46: 8f:99:2f:aa:b7:28:94:6c:7d:06:cf:5a:d6:ac:5b:68:6d:6d: 96:92:35:76:e1:58:94:4f:63:1e:eb:c8:95:39:2d:12:75:ef: a1:a2:ed:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2i9vdmaHyFXH+zZhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEyYTU1NzctNjg1NS00ZDg2LWEzZjEtYTA0YjU2MmU5 YzA2MB4XDTI2MDQyNjE3MDAwNFoXDTI2MDQyODE3MDAwMFowLzEtMCsGA1UEAxMk MGU4ODc3ZWItYWY2NC00MGY5LWExYzQtZWZiZDViYjUzNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3HW3UR3WQmEWB7GZEfKDdnpRDyv9HVmZ+w0 FQSvpKotrZ10eCUbpuVLMi8BLwlEyYhJl6rEs3hZAjD1iKRuX2fIa/6sOHnh+h7J RWhIDNDgxPj6GrZRCScddlwoVeCJcOxfycdDtpi4Nkvqbm5YqxYu7NQ4K2cqWcaW wfJinQKf69zlH2X7lM1Izg87/+M6icsoG8LZQQLuqZuqS84A9/eaiPos34LTzT6m EcHqQm1AmLr3FNAifCYgtRlL9qvLyc2/RqbMSrDMBOcKc6Ya/25iqnawfQ0tD8Zl NWduoapyKe4CcZPH0lLYni1IW4yRoV0Wgk6O4ijiamCRkJs0MQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNFeWoe1u91SuDFxpGzwDw/QYF8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTJh NTU3Ny02ODU1LTRkODYtYTNmMS1hMDRiNTYyZTljMDYvZGEyYTU1NzctNjg1NS00 ZDg2LWEzZjEtYTA0YjU2MmU5YzA2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEyYTU1NzctNjg1NS00ZDg2LWEz ZjEtYTA0YjU2MmU5YzA2L2RhMmE1NTc3LTY4NTUtNGQ4Ni1hM2YxLWEwNGI1NjJl OWMwNi5jcmwwHwYDVR0jBBgwFoAUSLgQliTh3nmOpEdkci4uYS5UmcowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTJhNTU3Ny02ODU1LTRkODYtYTNmMS1hMDRi NTYyZTljMDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG2QdD8fdURYDp/mIdh8mp tphdYCj1iG09mAHWwZEdbeeOJ/Ou6MnUvxJYuB7Qppv7f82Q8NH8rgAR45EE3mjo gLl4etVEKvxWnaqSG5p4SmH/GhSnIuDqpp2sezt/xAwsdM0LlleGCzwgkkTMAYzh BcCoxTcfGEwAKj5p/w8bpj0pED4D3ULVCG54kfRkJONu/HlfoaLVC0C9fXfgMhth RLRzP9g0MP1I2MBDQHEuko9xGmgHwv+HwtK/13EWE1zaDsyPt8Voa1T9xxEHgTE4 9Q0UkD3020aPmS+qtyiUbH0Gz1rWrFtobW2WkjV24ViUT2Me68iVOS0Sde+hou0k -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:03 2026 by rpki-client